This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json) Hash identifier: LL1PACp6VSIJoJ8TYQ6mRqV7g37El5aFmYz1x0u2648= Subject key identifier: 80:3F:2E:A6:64:F6:31:A6:EB:01:42:99:95:E6:5C:CD:87:0B:4E:90 Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe Certificate serial: 019B42801661ABC95EEF2FF9B85D8703CC1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft Manifest number: 0736 Signing time: Sun 21 Dec 2025 20:00:49 +0000 Manifest this update: Sun 21 Dec 2025 20:00:49 +0000 Manifest next update: Mon 22 Dec 2025 20:00:49 +0000 Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=) 2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: o0GpzQAwDPfd2z5RZCOVP6qY221wDE6uHXqsaPWLiTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:16:61:ab:c9:5e:ef:2f:f9:b8:5d:87:03:cc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe Validity Not Before: Dec 21 20:00:49 2025 GMT Not After : Dec 22 20:00:49 2025 GMT Subject: CN=803f2ea664f631a6eb01429995e65ccd870b4e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:d7:7e:31:33:db:44:fe:42:4c:ad:7f:bf: 71:66:82:f3:4a:14:ed:d1:b6:30:9f:89:33:3f:3b: 79:12:23:01:3d:66:73:51:de:c9:05:c4:1e:ab:57: f4:e6:a4:e7:09:91:30:0d:e8:ae:2b:37:70:fd:4c: 54:8b:ec:be:22:cd:81:0f:ab:3f:d5:85:04:d4:c6: cd:dc:1b:48:1c:d1:d6:8b:e3:f4:e2:22:92:8e:b9: b3:c4:41:ca:9f:5c:65:55:e2:78:8c:9e:15:0e:79: cb:99:32:d2:d4:a6:e7:d3:48:ba:86:ec:02:20:d0: ad:4d:5b:89:87:33:fc:52:84:e0:14:54:db:a5:e9: 08:7f:e8:4c:fb:1c:74:1b:e7:49:be:b0:da:7f:51: e7:86:37:93:11:58:f1:c8:ff:e6:c5:3d:1e:3f:cc: f3:6a:0d:75:4a:f0:90:7d:b6:0a:61:5e:73:06:74: a7:7c:65:74:9d:b8:9d:db:57:27:e6:80:84:a2:5c: e2:84:22:5c:a3:81:43:78:d8:58:2f:3f:42:e6:a9: b6:28:29:57:b1:b8:cd:2b:c7:86:0e:8b:60:a1:3d: ae:5d:a1:3b:34:d4:3f:67:9c:b3:a7:60:02:f6:fa: 26:42:61:fb:ab:f6:a0:64:08:86:63:26:5b:84:f7: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3F:2E:A6:64:F6:31:A6:EB:01:42:99:95:E6:5C:CD:87:0B:4E:90 X509v3 Authority Key Identifier: keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:16:60:a9:3f:d3:ec:4d:cb:c5:75:03:cb:39:fb:d6:30:40: b3:18:72:34:4c:35:6c:e8:c6:b7:75:b5:21:6c:fe:61:97:a4: fd:e9:22:3d:a9:05:b5:d9:4f:e2:04:d9:10:83:14:d6:86:2a: 62:c6:a6:ae:af:b7:36:3a:95:c9:bd:1e:09:da:09:24:42:40: 3d:78:a8:9f:67:30:9b:ab:82:f6:d7:d7:28:55:d1:9c:52:a9: 07:88:9c:25:f0:3f:53:47:c7:86:0b:f9:af:fc:ea:99:e5:4c: a9:a2:25:bc:94:d1:37:d0:df:3b:d6:df:ad:20:e9:a9:74:4f: 5e:ae:67:ec:87:38:27:b9:cc:8c:f6:a7:7d:e4:58:f8:cb:ab: ed:be:17:a2:95:6f:8f:54:b9:f1:98:e4:af:78:ee:95:72:8e: 70:bf:83:f6:eb:4e:05:75:39:52:62:b2:a7:56:0c:3f:86:ac: 6a:f8:2b:82:c7:d0:1f:72:38:9b:2a:6d:52:0b:85:42:04:08: a3:bf:78:33:d6:58:ce:0b:04:b6:ce:ae:b3:09:22:45:32:66: 3a:5f:e4:22:fe:40:e1:99:26:da:cf:98:88:18:f0:3b:e4:0a: ff:66:c0:7a:bd:16:cd:9b:41:92:d4:85:fc:94:78:ec:27:ca: ba:3d:ae:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgBZhq8le7y/5uF2HA8wdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjA4ODUxMjAyMzI4ZGNlNWZjMDFiZjlkZDI5MjUyMDUz MGQ5ZmUwHhcNMjUxMjIxMjAwMDQ5WhcNMjUxMjIyMjAwMDQ5WjAzMTEwLwYDVQQD Eyg4MDNmMmVhNjY0ZjYzMWE2ZWIwMTQyOTk5NWU2NWNjZDg3MGI0ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8bXfjEz20T+Qkytf79xZoLzShTt 0bYwn4kzPzt5EiMBPWZzUd7JBcQeq1f05qTnCZEwDeiuKzdw/UxUi+y+Is2BD6s/ 1YUE1MbN3BtIHNHWi+P04iKSjrmzxEHKn1xlVeJ4jJ4VDnnLmTLS1Kbn00i6huwC INCtTVuJhzP8UoTgFFTbpekIf+hM+xx0G+dJvrDaf1HnhjeTEVjxyP/mxT0eP8zz ag11SvCQfbYKYV5zBnSnfGV0nbid21cn5oCEolzihCJco4FDeNhYLz9C5qm2KClX sbjNK8eGDotgoT2uXaE7NNQ/Z5yzp2AC9vomQmH7q/agZAiGYyZbhPdEmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA/LqZk9jGm6wFCmZXmXM2HC06QMB8GA1UdIwQY MBaAFINgiFEgIyjc5fwBv53SklIFMNn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMt Yzc1NmFlMDFmYThhLzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMtYzc1NmFlMDFmYThh LzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBZgqT/T 7E3LxXUDyzn71jBAsxhyNEw1bOjGt3W1IWz+YZek/ekiPakFtdlP4gTZEIMU1oYq Ysamrq+3NjqVyb0eCdoJJEJAPXion2cwm6uC9tfXKFXRnFKpB4icJfA/U0fHhgv5 r/zqmeVMqaIlvJTRN9DfO9bfrSDpqXRPXq5n7Ic4J7nMjPanfeRY+Mur7b4XopVv j1S58Zjkr3julXKOcL+D9utOBXU5UmKyp1YMP4asavgrgsfQH3I4myptUguFQgQI o794M9ZYzgsEts6uswkiRTJmOl/kIv5A4Zkm2s+YiBjwO+QK/2bAer0WzZtBktSF /JR47CfKuj2uPA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:07 2025 by rpki-client